CVE-2022-49575

tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.

State: Published
Severity: 4.7 Medium
Published: Feb 26, 2025
Updated: May 11, 2026
Reserved: Feb 26, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

tcp: Fix a data-race around sysctl_tcp_thin_linear_timeouts.

While reading sysctl_tcp_thin_linear_timeouts, it can be changed concurrently. Thus, we need to add READ_ONCE() to its reader.

Scores

CVSS	Score	Vector	Source
3.1	4.7 Medium	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Affected Products

Product	Versions
LinuxLinux	36e31b0af58728071e8023cf8e20c5166b700717 to before f4b0295be9a3c4260de4585fac4062e602a88ac7Affected 36e31b0af58728071e8023cf8e20c5166b700717 to before 492f3713b282c0e67e951cd804edd22eccc25412Affected 36e31b0af58728071e8023cf8e20c5166b700717 to before cc133e4f4bc225079198192623945bb872c08143Affected 36e31b0af58728071e8023cf8e20c5166b700717 to before 404c53ccdebd11f96954f4070cffac8e0b4d5cb6Affected 36e31b0af58728071e8023cf8e20c5166b700717 to before a0f96c4f179cb3560078cefccef105e8f1701210Affected 36e31b0af58728071e8023cf8e20c5166b700717 to before 7c6f2a86ca590d5187a073d987e9599985fb1c7cAffected
LinuxLinux	2.6.34Affected before 2.6.34Not affected 4.19.254 through 4.19.Not affected 5.4.208 through 5.4.Not affected 5.10.134 through 5.10.Not affected 5.15.58 through 5.15.Not affected 5.18.15 through 5.18.*Not affected 5.19 and laterNot affected

Product

Versions

LinuxLinux

36e31b0af58728071e8023cf8e20c5166b700717 to before f4b0295be9a3c4260de4585fac4062e602a88ac7Affected
36e31b0af58728071e8023cf8e20c5166b700717 to before 492f3713b282c0e67e951cd804edd22eccc25412Affected
36e31b0af58728071e8023cf8e20c5166b700717 to before cc133e4f4bc225079198192623945bb872c08143Affected
36e31b0af58728071e8023cf8e20c5166b700717 to before 404c53ccdebd11f96954f4070cffac8e0b4d5cb6Affected
36e31b0af58728071e8023cf8e20c5166b700717 to before a0f96c4f179cb3560078cefccef105e8f1701210Affected
36e31b0af58728071e8023cf8e20c5166b700717 to before 7c6f2a86ca590d5187a073d987e9599985fb1c7cAffected

LinuxLinux

2.6.34Affected
before 2.6.34Not affected
4.19.254 through 4.19.*Not affected
5.4.208 through 5.4.*Not affected
5.10.134 through 5.10.*Not affected
5.15.58 through 5.15.*Not affected
5.18.15 through 5.18.*Not affected
5.19 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.